ADTRAN Stub Routing Spezifikationen PDF herunterladen (Seite 259)

100

101

Command Reference Guide IKE Policy Command Set

Step 8:

Create crypto map. A Crypto Map is used to define a set of encryption schemes to be used for a given

interface. A crypto map entry has a unique index within the crypto map set. The crypto map entry will specify

whether IKE is used to generate encryption keys or if manually specified keys will be used. The crypto map

entry will also specify who will be terminating the VPN tunnel, as well as which transform-set or sets will be

used to encrypt and/or authenticate the traffic on that VPN tunnel. It also specifies the lifetime of all created

IPSec Security Associations.

(config)#crypto map corporate_vpn 1 ipsec-ike

(config-crypto-map)#match address corporate_traffic

(config-crypto-map)#set peer 192.168.1.2

(config-crypto-map)#set transform-set highly_secure

(config-crypto-map)#set security-association lifetime kilobytes 8000

(config-crypto-map)#set security-association lifetime seconds 86400

(config-crypto-map)#no set pfs

Step 9:

Configure public interface. This process includes configuring the IP address for the interface and applying the

appropriate crypto map to the interface. Crypto maps are applied to the interface on which encrypted traffic will

be transmitted.

(config)#interface ethernet 0/1

(config-eth 0/1)#ip address 192.168.1.1 255.255.255.0

(config-eth 0/1)#crypto map corporate_vpn

(config-eth 0/1)#no shutdown

Step 10:

Configure private interface and add a static route to allow all traffic destined for the VPN tunnel to be routed to

the appropriate gateway.

(config)#interface ethernet 0/2

(config-eth 0/2)#ip address 10.10.10.254 255.255.255.0

(config-eth 0/2)#no shutdown

(config-eth 0/2)#exit

(config)#ip route 10.10.20.0 255.255.255.0 192.168.1.2

Technology Review (Continued)

1 2 ... 254 255 256 257 258 259 260 261 262 263 264 ... 567 568

Kommentare zu diesen Handbüchern

Keine Kommentare

ADTRAN Stub Routing Spezifikationen Seite 259

Kommentare zu diesen Handbüchern

Verwandte Produkte und Handbücher für Vernetzung ADTRAN Stub Routing